BGP keeps me awake at night. I think the only reason we don’t see more hijacks is that it’s beyond the complexity level of most script kiddies.
RPKI is coming along, but I doubt it will ever be widely enforced by providers, although this seems to get more green as time passes, so maybe we’ll get there yet.
To be fair, it IS always DNS. Unless it’s firewall in which case it’s DNS.
It’s true, it does force some introspection.
I’ll chip in my two cents that I have been a people manger a few times in my career. I find self assessments to be very useful; they shine a light into places I didn’t know my team had. I actually builds camaraderie in a weird way.
I am deducting two points from your house for missing the opportunity to use “brotopia”.
